Sasser  demonstrates  the  need  for  speedy  patching. 


Scorecard  helps  Delta  Technology  weigh  IT  risks. 


COMPOTERWORLD 


Security  Threats  Raise 
Concerns  About  Bluetooth 


Faster  than  the  speed  of  change. 

Be  nimble.  Be  quick.  HP  Integrity  Servers  are  capable  of  executing  one  r 
transactions  per  minute  and  built  to  run  multiple  operating  systems  simulta 
Supported  by  Intel®  Itanium®  2  technology,  Integrity  is  the  most  powerful  I 
industry-standard  servers  available  today.  Providing  you  with  the  comp 
power  to  adapt,  evolve  and  change  faster  than  anyone,  anywhere,  at  an 
www.hp.com/info/integrity 


HP  Integrity  servers  are  taking  off,  as  are  the  companies  using  them. 


HEWS 


hliWHIL'ld  CA  World  to  Focus  on  User 
Schmidt  Won’t  Run  Concerns,  Product  Integration 

For  Congress  Seat  Customers  seeking  change  and  financial  discio-  Sic™ 

0^«SXfncCh^S  reassurance  after  CA  World  2004 

Friday  that  ha  won't  see*  the  8th  company  shakcup  nounces.  because  they  mean  wimnuMiw  ,iono, 

District  congressional  seat  being  -  the  organization  won’t  be  as  KeytfwnesttfincMe:  across 

vetted  in  hishome  state  of  by  matt  hamblen  focused  ton  customers]  as  •*murmcm**iwmmh  lines;€ 

Microsoft  Corp.  said^he  plans  to  A=  nualCA  World  development  acknowledged  tfoneflour  manag 


Si^baSb,  CA’s  Barrenechea  Explains  Offshore  Strategy 


announce  the  launch  of  its 
RFID  Center  of  Excellence  in 
Palo  Alto,  Calif.,  where  cus- 


build  RFID  road  ma 


Printing  Services  Getting 
Outsourced  to  Cut  Costs 

Some  companies  find  equipment  too 
expensive  to  own,  hard  to  keep  track  of 


know  bow  much  they ; 


can  be  networked,  giving  Ford 
the  ability  to  monitor  printer 
use  through  a  portal.  Ford  em- 
"  replace  paper  and 


Printing  Services  Getting 
Outsourced  to  Cut  Costs 

Sonic  companies  find  equipment  too 
expensive  to  own.  hard  to  keep  track  of 


MORE  ONLINE 


COMPtlTEIIWOfllD  Hi,  10. I 


SCO  Cuts  Jobs 
In  Bid  for  Profits 


Delta  Stays  Mum  on 
Cause  of  IT  Glitch 


Delia  Ait  Lines  Inc.  declined  to 


Gates  Pays  Fine 
Over  Stock  Buy 


Short  Takes 

IhtSRlTlSH  BROAOCAf, 


[ON  THE 


NEW  PRODUCT 

NEWS  AND  INDUSTRY  GOSSIP 


1 


Drive  the  value  of  your  investment  in 
operational  software.  Once  and  for  all. 
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Sutter  is  engaged  in  a  mas- 

VJIOVW  1  1UUO  >JUU 

WLANs  to  Its  5 

New  module  will  let  Catalyst  6500s 
centrally  manage  wireless  networks 

L  1U1 

witches 

bilities  to  WLANs.  Rossi  said. 

pital  buildings  and  the  IT  net¬ 
works  in  them.  Many  of  the 
hospitals  are  insulated  with 

stalling  WLANs  is  far  leTs  ex" 

would  be  needed  to  build  new 

like  Airespace  Inc.  and  Symbol 
Technologies  Inc.  charge  for  ’ 

switch-based  systems  that  only 
manage  WLANs.  For  example. 

San  Jose-based  Airespace  sells 
its  access  points  for  $400  and 
switches  for  $12,000  to  $14,000. 

#  last  week  announced 

works,  said  Bill  Rossi,  vice 
president  of  its  WLAN  divi¬ 
sion.  He  added  that  the  Cata- 

give  them  different  levels  of 

Health  in  Sacramento,  said 

The  base  configuration  of 
the  WLSM  costs  S18.000  and 
can  manage  up  to  150  of  Cis¬ 
co’s  access  points.  For  another 

marketing  at  Airespace.  said 

ing"  in  the  WLSM  announce¬ 
ment  and  claimed  that  Cisco 

capabilities  to  its  Catalyst 

6500  switch  line,  a  move  that 
will  give  IT  managers  the  abil¬ 
ity  to  control  their  wired  and 

Cisco  is  aiming  the  Wire¬ 
less  LAN  Services  Module 
(WLSM)  at  large  corporate. 

millisccond  bandoffs  between 
wireless  access  points  when 

co’s  ability  to  support  applica- 

Network  managers  can  also 
use  WLSM-equipped  switches 
to  add  firewalls  plus  intrusion- 

plans  to  use  the  device  to 
manage  Cisco-based  WLANs 
in  Sutter’s  25  hospitals  in  Cali¬ 
fornia.  He  also  intends  to  use 
the  module  to  manage  VoIP 
calls  when  Sutter  starts  testing 
hands-free  voice  devices  made 
by  Vocera  Communications 

for  the  company’s  Inter¬ 
networking  Operating  System 
software  that  lets  them  control 
a  total  of 300  access  points. 
Rossi  estimated  that  the  total 
cost  of  adding  a  WLSM  mod¬ 
ule  to  a  Catalyst  6500  switch 
and  installing  wireless  access 
points  would  be  between  $500 

Aaron  acknowledged  that 

Cisco’s  addition  of  WLAN 
support  to  its  market-leading 
switches  could  put  competi- 

hopes  to  continue  taking  ad¬ 
vantage  of  its  reseller  deals 
with  Alcatel.  NEC  Corp.  and 

Cisco  Rivals 

In  the  wake  of  Cisco's  Wireless 
LAN  Sen**  Module  announce¬ 
ment  Arespare  and  Symbol 

(tans  to  beef  up#**  WLAN 
orotic!  lines  at  this  week's  Net- 

Airespace  will  introduce  its  In¬ 
telligent  Rf  Access  Point  wtecfi 
uses  so-caled  smart  entenna 
lectinotogy  to  improve  WLAN 
performance.  Four  recene  and 
lour  transmit  antennas  are 

Ready  WLAI 

:  lowing  it  loafed  the  best  radio 

•  btleusas.  said  Jeff  Aaron,  senior 
:  marketing  manager  at  Airspace. 

The  multipte^nlenna  setup 
:  also  help6  reduce  tnterfsrence 
■  between  access  points  and  client 
:  devices  and  can  help  IT  man- 
:  agers  zero  in  on  rogue  access 

:  Aaron  added.  The  new  access 

•  pent  is  due  In  the  third  quarter 
:  and  will  be  priced  at  an  undts- 

4  Responses 

dosed  premia!  over  Atrespace's 

sel  tor  about  WOO. 

Airespace  also  plans  to  intro¬ 
duce  software  that  can  pinpoint 
the  locations  of  mobile  devices 
'within  a  lew  meters'  using  radio 
frequency  fingerprinting  technol¬ 
ogy  developed  by  the  company. 

that  can  track  thousands  ol  wire- 

Aaransald. 

Hottsville.  N.Y. -based  Symbol 

Technologies  is  wdl  announce  its 
Mobility  Services  Suite,  a  set  of 
applications  that  IT  managers 
can  use  to  aulanalicafly  provi¬ 
sion.  configure  and  manage  mo¬ 
bile  devices  and  WLANs.  Lee 

Williams,  general  manager  ol 

Symbol’s  mctHlky  division,  said 
the  software  wff  be  available  si 

July  or  August 

-BobBram 

MORE  IM  NEWS 

“Airespace  put  the  switch 
into  wireless,  and  Cisco  put 

Craig  Mathias,  an  analyst  at 

Farpoint  Group  in  Ashland, 

Mass.  He  added  that  he  thinks 

WLANs  is  starting  to  heat  up 

cems  have  been  resolved. 

of  decentralized  WLANs,  but 

Rossi  said  the  addition  of  the 

WLSM  isn’t  a  wholesale 
change.  The  company  will 
continue  to  build  software 
that  manages  the  airwaves  and 
security  functions  into  its  ac¬ 
cess  points,  he  said.  O  46746 

Proposed  Bill  Seeks  Stronger 
Privacy  Protection  Offshore 

Status  of  data  now  1 

Otisnore  unclear  Clinton  (D-N.Y.)  last  month. 

“We  don’t  know  if  this  thing  i 

Adlerfa partnerat  Foley &  ? 
Urdner  LLP  ^Washington.  | 

hearing  of  bills  such 
as  this  "California 

IL-.iiriiT  1 

financial  and  health  care  in¬ 
formation  being  sent  offshore 
as  part  of  outsourcing  initia¬ 
tives.  including  medical  tran¬ 
scription  work,  he  said. 
hhh  SAFE-ID  proposes 
a  set  of  privacy- 
related  conditions 

try  that  is  deemed  by  the  Fed¬ 
eral  Trade  Commission  to 
have  a  legal  system  that  pro¬ 
vides  for  “adequate  privacy 

But  the  law  as  proposed 
doesn’t  address  data  that  has 
already  been  transmitted  to 
and  stored  in  foreign  loca- 

Proposed  legislation  in  Con¬ 
gress  could  have  some  impor¬ 
tant  privacy  and  security  im- 

sourcing  work  to  offshore  des- 

The  bill  (S1232),  called  the 
Safeguarding  Americans  From 
Exporting  Identification  Data  1 

Commerce.  Science  and 
Transportation. 

Calls  to  Sen.  Clinton’s  office 

turned,  so  it’s  unclear  whether 
hearing  on  the  bill  has  been 
scheduled  or  whether  a  com¬ 
panion  bill  has  been  intro- 

ook  tr 

ily  id.-nmM-iv  in 

II  i«  rd  n  II  »,>  ;  formation  In  a  for- 

sourced  persona]  in^  M  elpn  affiliaie  or  sub- 

Driving  interest  ui  HHMM  the  proposed  act, 
such  legislation  are  ■9EJHEB|  companies  could 
the  growing  privacy  transmit  such  infer- 

of  Infosec  Law  Group,  a  law 
firm  in  Mountain  View;  Calif. 

It’s  also  vague  about  what 
would  happen  in  situations 

mitted  by  subcontractors,  said 

Wu.  “There’s  going  to  be  a  lot 
of  interpretations  if  this  be¬ 
comes  law,”  be  said.  O  46751 
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Sasser  Outbreak  Demonstrates 
Need  for  Quick  Patch  Response 


Vulnerability  management  is  key  to 
defenses  as  attackers  improve  tactics 


IS  still  progress  to  be  made  in 
promptly  responding  to  such 


extended  period 


iv: 


The  big 
thing  was 

of  those  infected  the  Speed  With 
las.  week  were  be-  Which  We  WetB  long-reeommend 

able  to  deploy 

large  organiza-  patches  to  our 

■ioaswerehi1^  desktop. 


threats  and  re- 

iuuilii(iiiiui  ,  s ponses,  apply- 

ER.  TRW  AUTOMOTIVE  in8  appropriate 


STRUCTURE  VULNERABILITY 


tern  protected  St.  Louis-based 
Tripos  Inc.  against  Sasser. 


Red  Hat  Offers 
Desktop  Linux  for 
Corporate  Users 


rate  server  market  should  help 
[  the  desktop  software  gain  ac- 


I  desktop  Linux  as  part  of  a  tri-  of  the  desktop  haiSwaresup-  j 
al.  Several  IT  staffers  have  pliers,"  Kusnetzky  said.  “If 


In  March.  Hewlett-Packard 
Co.  said  it  would  make  Novell 

standard  desktop  distribution 
of  the  operating  system.  HP 

plans  to  do  so  on  its  desktop 
systems,  an  HP  spokeswoman 
said.  But  she  declined  to  com¬ 
ment  on  whether  HP  specifi- 


Siebel  Taps  IBM  Sales 
Chief  for  CEO  Post 


With  Lawrie  Leaving,  IBM  Shifts  Execs 


IBM  last  week  reshuffled  several  All  three  executes  are  senior 
oi  Us  top  executives  in  connec-  vice  presidents  and  report  to 
lion  with  Michael  Lawrie's  deci-  Sam  Palmisano.  IBM's  chairman 
Sion  to  leave  his  sales  job  there  and  CEO. 

and  lake  over  the  CEO  position  Inanlntema!  memo  outlining 
at  Siebel.  the  changes  to  IBM  employees, 

Doug  Bix.  who  had  been  run-  Palmisano  noted  Lawrie's  demr- 


NEWS 
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Red  Hat  Offers 
Desktop  Linux  for 
Corporate  Users 


COMHITEUWOIID  May  10. 


Compliance  Bonanzas  r^niri 


i6  OPINION 

MARYFRAN  JOHNSON 

Compliance  Bonanzas 

■  ~W  "^T’HEN  WAS  THE  last  time  you  read  “d  lc8al  Attorney  Peter 

\  \  /  about  a  $40,000  retention  bonus 

m  /  for  someone  with  a  hot  skill  in  IT?  the  audience  about  creating  silos  of 

V  V  was  sometime  around 

V  ▼  the  turn  of  the  century,  when  Y2k  expertsinHRandasetofSarbanes- 
fears  had  CEOs  wringing  their  hands  and  CFOs  sign-  0xley  specialists  in  the  finance  de- 
ing  checks  for  whatever  IT  asked  for. 

PIMM  FOX 

Pushing  IT 
With  the 
Govemator 

'T'tr  'THAT  HAS  YOUR 
\A/  governor  done  for 

V  V  you  lately? 

I’m  talking  about  tax  cred¬ 
its,  grant  money,  streamlined 

sap.cona/netweaver 


/ith  POWER5™ 
sly  run  four 


ROBUST  OBJECTS 
AND  ROBUST  SQL 


V 

# 

_ 4 


GET  DATA  IN  THE 
BLINK  OF  AN  EYE 

For  your  next  generation  of  applications,  move  environment  that  dramatically  reduces  the  time  to 
to  the  next  generation  of  database  technology.  build  and  modify  applications. 

Cache  is  the  post-relational  database  that  com-  The  reliability  of  Cache  is  proven  every  day  in 

bines  high-performance  SQL  for  fester  queries  and  “life-or-death”  applications  at  thousands  of  the  world’s 


porates  a  powerful  Web  application  development  ranging  from  two  to  over  10,000  simultaneous  users. 


Free  White  Paper 

Read  or  request  a  copy  of  the  Baroudi/Bloor  white  paper  “The  Failure  of  Relational  Database, 

The  rise  of  Object  Technology  and  the  Need  for  the  Hybrid  Database.”  at  www.InterSystems.com/cworld 
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iurmn- 


Network  Friendly. 


Kyocera’s  advanced  technology  makes  network 
administration,  updating,  and  training  a  snap.” 

Common  driver,  common  interface  makes  business  simple  and 
increases  productivity.  And  NetView'"  software  gives  you  one  tool 
to  manage  everything.  If  you’re  looking  for  the  best  in  class 
printers,  copiers,  MFPs,  and  network  solutions,  look  to 
Kyocera  for  an  exceptional  solution. 


vPeopleFnendlyj  nie  simple  idea  that's  making  it  big  everywhere. 


tSKtJQCERa 


Companies  are  using 
consolidation  technologies  to 
stop  expensive  and  risky  portal 
proliferation.  By  Steve  Ulfelder 

CONQUERING 


ZiTtTz] 


Visionary  &  Featured  Speakers 


Sybase 


Connect  proven 
mobile  and  wireless  solutions 
to  your  enterprise  strategy 


Attend  the  content-rich  conference  that  sees  an  enterprise  without  wires 


& 

Wireless 


May  24-27,  2004 

IW  Marriott  Desert  Springs  Resort  •  Palm  Desert,  California 


For  more  information,  visit  www.mwwusa.com/mcwt  or  call  1-800-883-9090 


For  more  information  and  to  register,  visit  WWW.m' 


A  server  engineered  to  deliver  on  both  sides  of  the  price/performance  equation. 


The  HP  ProLiant  DL380  G3  gives  you  true  high  performance  at  a  truly  affordable  price,  while  our  Intel*  Xeon  - 

processor-powered  HP  ProLiant  DL380  G3  server  certainly  offers  blazing  performance,  the  engineers  behind  it  would  challenge  you  to  rethink  the  definitic 
of  performance  entirely.  Consider,  for  example,  what  happens  when  you  need  to  odd  a  storage  device  to  a  typical  server- the  server  must  be  powered 


down,  and  your  productivity  drops  to  zero.  This  fact  led  us  to  design  hot-pluggable  technology  on  the  DL380  that  allows  you  to  swap  out  a  number  of  key 
server  components,  including  the  reliable  and  efficient  HP  DAT  72h  tape  backup  solution  without  ever  interrupting  server  operation.  The  DL380  and  DAT  72h 
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A  Paper  Tiger 

Ignored  security  policies  result  in  problems 
ranging  from  rogue  access  points  to  inade¬ 
quate  incident  response.  By  Mathias  Thurma 

I  week,  and  both  came  about  I  some  nearby  switches,  but  t 


SECURITY 

MANAGER’S 

JOURNAL 


The  device  had  no  encryption 

the  Service  Set  Identifier 
code,  and  the  AP  gave  my  de- 


neering  group  and  gave  it  my 

that  they  could  log  into  the 
switch  that  was  serving  the  lo¬ 
cation.  look  up  my  MAC  ad- 


j  on  the  switch  port.  Because 
not  a  hub.  the  MAC  address 

then  unplugged  the  AP  and 


If 

The  installation  of 
unauthorized  APs 
has  been  a  continu¬ 
ing  problem,  so 
when  I  detected  one 
the  other  day, 

I  wasn't  surprised. 


1  ^“ea"^  1 

I  to  keep  the  incident  from 

iSSSSSi ) 

|  link  to  the  policy. 

I  fk'LuSl^Xmst  1 

Something  in  Common 

wXLTar™a7crify' 

Although  we’re  gening  bet- 

■  on  incident-handling  and  re- 

common  problems  arisc^One* 

-  equipped  to  do  [QuickLink 

charge.  There  are  always  lots 

a  better  job  and  discovered 

looking  at  logs,  e-mail  and 

handling  policy.  The  data  cen* 

steps  up  to  the  plate. 

|  networking  group  has  some- 

relevant  information  wilh  rc- 

"ton  “tod  easy  way ,°  identify 

^^.Hnteaejd,- 

terprise  network  is  to  enter 

JmrS^dp^tlon 

mand  will  typically  identify 

mSSSSSnt. 

3Hsr^ssal' 

single-page  incident-protocol 

to  an  incident.  My  goal  was  to 
create  something  that  could 

mand.  I  don’t  quite  under¬ 
stand  why.  as  it’s  a  task  that 

complete.  Hopefully,  by  creat- 

response  protocol  and  ensur- 

tiTt  <jarh3nd  placcd  rjcxt  t0 

same  page,  our  responses  to  all 

curity  badge  and  SecurlD  to- 

ployces  carry  around.  I  fo- 

aspect  of  doing  business.  1 

WHAT  DO  YOU  THINK? 

knowing  wh"  “hh 

1  ^*SC  ,ivcs'  ResP°nsc  J«c- 

thurmanliyahMOTn^or  gnttg  discussion 

O  computerworld.com/secioumal 

SECURITY  LOG 


fc 
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Security  Policy 
A  Paper  Tiger 

Ignored  security  policies  result  in  problems 
ranging  from  rogue  access  points  to  inade¬ 
quate  incident  response.  By  Mathias  Thurman  « 


»  ^  installation  of 

s.  identify* the  port  and  Unauthorized  APS 

:  u  to  a  sp^nc  wau  jack,  has  been  a  continu- 

ie  past.  Tve  successfully  inn  nmhlon,  on 

lifted  rogue  APs  in  this  PrODlCfTI,  SO 

ner-  when  I  detected  one 

,  the  other  day, 

4AC  address.  I  even  had  I  W3Sn  t  Surprised. 


Need  Answers  to  Your 
Business  Intelligence  Questions? 

Apply  to  Attend  Computerworld’s  IT  Executive  Summit 
on  Business  Intelligence 


JO 
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Voyence  Launches 
Networking  System 


NICHOLAS  PETRELEY 


Exact  Upgrades 
Collaboration  App 


Living  Down  to  a 
Low  Standard 

I  RECENTLY  SPENT  the  better  part  of  a  week  than  Windows.  I  toast  their  rousing 

working  with  the  latest  version  of  the  open- 

Source  GNOME  graphical  desktop  environment  itive  keystrokes  and  shift-key/mouse- 
on  Linux.  click  operations  you  can  use  to  make  it 

I’ve  decided  that  the  only  way  to  explain  the 
regression  of  GNOME  over  the  years  is  that  Microsoft  ,he  gnome  developers  say  they  are 
and/or  SCO  moles  have  infiltrated  the  GNOME  leader- 

ship  in  a  covert  effort  to  destroy  any  possibility  that  logic  when  defending  their  design 

Linux  could  compete  with  Windows  on  the  desktop.  choices  For  examfle' °”e  gnome  de- 


now  as  pvt  of  e-Synergy  and  is 

lives  down  to  the  same  low  standards 

Having  used  OS/2  for  years,  I  found 
GNOME’S  retro  approach  to  be  a 

tilus  to  work  the  way  they  like. 

Of  all  the  criticisms  one  might  lodge 

rather  pleasantly  nostalgic  experience. 

against  GNOME,  it’s  the  hypocrisy  of 

Apreo  Releases 

to  Version  2.6.  a  user  might  reasonably 

folders  the  way  one  does  on  virtually 

largest.  GNOME  grew  out  of  the  de¬ 

Enforcement  Tool 

Aprao  Inc.  has  laundiad  Work¬ 
station  MfcjShMd,  an  ippfica- 

expect  that  he  wouldn’t  have  to  adapt 
to  yet  another  paradigm  shift  in  basic 
user-interface  design,  especially  when 
it  comes  to  something  as  fundamental 

every  other  desktop,  however,  I  decid¬ 
ed  to  tell  the  file  manager  not  to  open 
a  new  window  for  every  folder.  But  it 
turns  out  there  is  no  Dreference  set- 

sire  to  free  people  from  Microsoft's 
ability  to  dictate  what  users  can  or 
can't  do.  Yet  GNOME  is  built  on  the 

05.10.04 
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upgrading.  Page  34 


*  Career  Watch 

'  Mary  Finlay,  deputy  CIO  at  Partners 
■*  "  re.  talks  about  the  Regional 


Risk/Reward  Contracts: 
Laying  the  Foundations 

Bart  Perkins  explains  how  to  r 
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In  2003.  the  health  care 
industry  wasted  more  thar 
S11  billion  asa  result  of 
supply  chain  inefficiencies. 
Supplies  account  for  30°  o 
of  a  hospital's  overall  cost 
structure. 


xf  book  example  of  a  hospital  I 
iat  grew  by  merger  and  acqui-  ; 

•  good  materials  management 
in  place,  but  they  were  run- 


individual  buyers.  They  learned  that 


Dissatisfied  with  the  performance  of  an 
I  outsourcer  it  had  hired  to  handle  sup- 

hospital  University  Health  Network 

form  a  for-profit  hospital  supply  logis¬ 
tics  company.  Today,  that  company, 
known  as  Hospital  Logistics,  serves 

(tuners  in  Toronto  as  well  as  its  own 
three  hospitals.  The  venture  has  yet  to 


ited  with  the  accounting  sys- 

opportunity  to  implement  a 
computing  platform  for  its 


live,  giving  hospital  adminis- 


Pro*K»s  electronically.  There's  also  keen 
competition  for  control,  which  solar  has 

made  matters  worse,  not  better,  experts 
TMIerent  players  have  a  vested  inter- 

run.'  says  IOC  analyst  Albert  Pang  -Of¬ 
ten.  individual  suppliers,  distributors  and 
group  purchasing  organizations  try  to 
bulk)  their  own  ocosyslems  via  0*  or  oth- 


AT&T’s  forward-thinking 
:ons  stay  one  step  ahead 
of  your  network’s  needs 


Got  Questions  About 
Network  Consolidation? 

Computerworld’s  IT  Executive  Summit  Has  the  Answers 
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ness  Area  3  (see  small  chart). 

The  method  works  for  all  parts  of 
the  business.  Leinbach  says.  “Even  if 
you  are  just  in  finance  and  responsible 
for  the  books,  that's  not  required  to 


you  can’t  file  your  paperwork.” 

The  final  step  in  preparation  for 
budget  writing  is  to  develop  multiple 


risk  do  you  think  you  can  take?  Do  you 
overall  so  your  share  could  be  larger?’ 


i  is  highly  automated, 
Leinbach  says,  but  “some  of  the  other 

Although  Delta's  methodology  is  rel¬ 
atively  simple,  it’s  more  rigorous  than 
what’s  employed  by  75%  to  90%  of  For- 
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kkl  M  V  spynJ  money  >»  upgr.tjy  or  rypl.tyy 

ness  Area  5  ( see  small  chart ).  risk  do  you  think  you  can  take?  Do  you 

thy  business.  Lyinhayh  says.  "Kvyn  if  |  overall  so  your  share  soulj  hy  l.iryyr? 

you  can’t  file  your  paperwork."  '  bilities  and  modes*  is  highly  automated, 

pact  on  risk  (again  by  color)  in  each  of  Although  Delta’s  methodology  is  rel- 

from  different  levels  of  spending  on  IT  whats  employed  by  75"..  to  W1..  of  h»r- 
1  infrastructure  renewal.  tune  500  companies,  says  lack  Heine. 

The  scorecards  help  focus  managers'  an  analyst  at  (iartner  Inc.  It  gives  IT 

says.  "A  big  red  stoplight  is  a  great  com-  and  for  predicting  their  effects  on  fu- 

The  airline  uses  a 
rigorous  but  simple 
scorecard  to  balance 
the  risk  of  technology 

capital  budget  is  prepared  annually. 

says  Brian  Lcinbach.  senior  vice  presi- 

But  the  debating  and  wrangling  has 
now  largely  stopped,  he  says,  thanks  to  .  j 

municat ions  tool.  The  risk  analysis  lure  risk,  he  says. 

tu  yommunivatv  thym  In  all  levels  of  fael  that  they  are  actually  applying  it  to 

management,  he  adds.  ,  their  future  migration  planning."  Heine 

j  "Doing  this  by  business  area  allows  us  says.  When  business  people  ask  what 

someone  on  the  business  side  of  the  can  say.  “  Well,  we  quantified  the  risk 

table."  Leinbach  says.  "You  arc  really  ,  in  2004.  and  we  will  be  able  to  mea- 

failure  against  the 
costs  of  upgrading. 

this  much  in  this  area,  these  are  the  re-  against  plan  in  2007.’  That’s  great." 

suits.  Are  you  OK  with  that?  How  much  C  46038 
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RISK-SCORING  GUIDELINES 

CATEGORY  ;  ;  VALUE 

further  might  cost  lOOx,  which  is  con¬ 
sidered  too  high  for  the  expected  pay- 

3  ;  3  years  old 

BnsitifS'.  1  ;  Would  disrupt  noncore  functions  (eg.  finance.  HR) 
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McClintock  to  Lead 
Arch  Insurance  FT 

Scott  McCSntoc*  has  bwipro- 


Nextel  Boosts  EDS 
Contract  by  S100M 


Risk/Reward  Contracts: 
Laying  the  Foundations 


UNDER  THE  RIGHT  CIRCUMSTANCES, 

risk/reward  contracts  can  provide  signif¬ 
icant  benefits  to  both  buyers  and  sellers 
[QuickLink  45728].  Because  these  con¬ 
tracts  withhold  a  significant  percentage 

of  the  fees  until  the  project  metrics  can  help  you  avoid 

successfully  completed.  being  at  the  mercy  of  wide- 


going  operating  costs  higher  than 
they  should  be. 

Get  intantepartmental  support  early. 

over  several  budget  years,  the  finance 
staff  will  need  to  accept  multiyear  "at 
risk"  accruals  that  represent  contin¬ 
gent  liabilities  on  the  balance  sheet 
(i.e„  payments  you  will  make  only  if 
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McClintock  to  Lead 
Arch  Insurance  IT 


ance  company.  McClintock  will 
establish  a  long-term  IT  architec- 


Nextel  Boosts  EDS 
Contract  by  S100M 


Risk/Reward  Contracts: 
Laying  the  Foundations 


U: 


JNDER  THE  RIGHT  CIRCUMSTANCES. 

risk/reward  contracts  can  provide  signif¬ 
icant  benefits  to  both  buyers  and  sellers 
[QuickLink  45728].  Because  these  con¬ 
tracts  withhold  a  significant  percentage 


is  successfully  completed, 
they  offer  a  way  to  share 
both  risks  and  rewards  with  i 
your  supplier.  Risk/reward 

careful  consideration.  Here 


been  achieved. 

reward  specific  behavior. 
For  example,  metrics  for 
a  new  application  might 

nate  large  deviations  in  re- 


and  stan  reaping  the  benefits.  Fi¬ 
nance  will  need  to  accrue  potential 
additional  payments  as  soon  as  the 
endeavor  starts,  rather  than  wailing 
until  the  end  and  being  surprised  by 
the  total  fees. 

■  Legal.  In  addition  to  normal  con- 
I  tract  terms,  you  will  need  to  negotiate 
special  situations.  For  example,  if  your 


Use  clear  metrics.  The  success  of  your  Define  counterbalancing  measures  of  sue-  er  successfully.  This  li 

These  measures  form  the  basis  for  de-  into  account  and  accurately  reflect  provides  incentives  fi 

termining  whether  additional  financial  multiple  goals.  For  example,  if  the  O  46411 

payments  are  warranted.  They  are  par-  |  only  measure  of  success  is  response - 

.icularly  necessary  in  multiyear  con-  |  time. , ,sys.en,s  imegnuor  migh,  re-  WANT  OUR  OPINION? 


How  does  your  rack  really  stack  up? 


Take  the  APC  Rack  Challenge  and  find  out  how 
the  New  NetShelter*  VX  outperforms  your  brand. 
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the  Oracle  Platform 


Database  lOg 
Application  Server  10 g 


Common  LDAP  directory 
Unified  security  model 
Common  administration 
Automated  space  management 


Engineered  to  work  together 


ORACLE 


oracle.com/platform 
or  call  1.800.633.0753 
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